Glossary

Glossary

Term	Meaning in CPCF
Admitted	Accepted into a signed, generation-bound authority state after the required checks. It is not the same as uploaded or queued.
Analysis-basis digest	Digest that identifies the immutable inputs used by an analysis, excluding witness digests so that the object graph remains acyclic.
Attestation	A signed statement about a typed subject. Ordinary attestations are single-principal; high-impact decisions may require role-separated signatures.
Bundle	Portable collection of objects that can be checked for content consistency and, with a trust policy and root attestation, distribution authenticity.
CPCF object	Immutable bytes plus their CPCF storage and projection semantics. This does not make an external source-system fact authoritative in CPCF.
DSSE	Envelope format used to protect and bind the canonical evidence payload.
External runner	Separate customer-controlled execution boundary that receives signed jobs and returns attempt- and lease-bound receipts.
Generation	Immutable version of a workspace's authoritative CPCF state. Existing-workspace mutations use an expected generation to avoid stale changes.
Operational organization profile	Thirteen independent status dimensions, each reported as satisfied, violated, unknown, or unknown due to budget.
Projection	CPCF's typed representation of an external or internal record. A projection does not take over the source system's authority.
Quarantine	Non-authoritative storage state for uploaded or legacy bytes pending an applicable signed admission process.
Receipt-backed promotion	Transition that connects a permitted external effect or measurement receipt to an evidence state. Planner output alone cannot supply it.
Role separation	Requirement that high-impact signatures on the same subject come from distinct required roles, principals, and keys. It is not threshold cryptography.
Source of record	System that retains authority for a fact or decision. CPCF's source-of-record map prevents accidental semantic ownership transfer.
Trusted time	Evidence used to evaluate historical validity and ordering. A local wall clock is not authoritative trusted time.
Unknown due to budget	Result that remains unresolved because a declared finite computation or search budget was exhausted.